CVE-2025-71083Medium
CVE
CVE
National Vulnerability Database
NVD is the U.S. government repository of standards-based vulnerability management data, built on top of the MITRE CVE list. Every record includes CPE applicability statements, CVSS v2 and v3.x base scores, CWE mappings and cross-references to advisories.
Region
US
Updates
15 min
License
Public Domain
Comprehensive catalog of publicly disclosed vulnerabilities with CPE matches, CVSS scoring and reference URLs. De-facto standard for cross-vendor correlation.
https://nvd.nist.gov →Share link
Anyone with the link can open this vulnerability.
In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Avoid NULL pointer deref for evicted BOs It is possible for a …
CVSS
5.5
Medium
EPSS
0.00
p1
Published
2025-01-01
Updated
2025-01-01
Description
In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Avoid NULL pointer deref for evicted BOs It is possible for a BO to exist that is not currently associated with a resource, e.g. because it has been evicted. When devcoredump tries to read the contents of all BOs for dumping, we need to expect this as well -- in this case, ENODATA is recorded instead of the buffer contents.
Tags · CWE
CWE-476
CWE-476BaseStable
NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.
https://cwe.mitre.org/data/definitions/476.html →Open in CWE collection →Affected products
LinuxLinuxLinuxLinuxLinuxLinuxLinuxLinuxLinuxLinux-6.1Linux-allwinner-5.19Linux-awsLinux-awsLinux-awsLinux-awsLinux-awsLinux-awsLinux-awsLinux-awsLinux-aws-5.0
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Timeline
2025-01-01
Published
2025-01-01
Updated
CVSS 3.1 breakdown
Attack Vector
AV: L
Local (L)
Attack Complexity
AC: L
Low (L)
Privileges Required
PR: L
Low (L)
User Interaction
UI: N
None (N)
Scope
S: U
Unchanged (U)
Confidentiality Impact
C: N
None (N)
Integrity Impact
I: N
None (N)
Availability Impact
A: H
High (H)
Exploit indicators
EPSS
0.001 · p1
Known exploited (KEV)
No
Known exploits — Сканер-ВС
No Сканер-ВС checks registered for this vulnerability yet.
Affected products
| Product | Vendor | Status |
|---|---|---|
| linux | Tracked | |
| linux | Tracked | |
| linux | Tracked | |
| linux | Tracked | |
| linux | Tracked | |
| linux | Tracked | |
| linux | Tracked | |
| linux | Tracked | |
| linux | Tracked | |
| linux-6.1 | Tracked | |
| linux-allwinner-5.19 | Tracked | |
| linux-aws | Tracked | |
| linux-aws | Tracked | |
| linux-aws | Tracked | |
| linux-aws | Tracked | |
| linux-aws | Tracked | |
| linux-aws | Tracked | |
| linux-aws | Tracked | |
| linux-aws | Tracked | |
| linux-aws-5.0 | Tracked |
Showing first 20 of 291
Source databases
ALT
ALT
ALT Linux Security Errata
ALT Linux is a family of independent Russian Linux distributions built on the Sisyphus repository by BaseALT and certified by ФСТЭК for government and critical-infrastructure use. This source aggregates ALT's published errata (errata.altlinux.org / OVAL) with БДУ ФСТЭК records that flag ALT as an affected platform, mapping each issue to the fixing package and branch.
Region
RU
Updates
1 ч
License
Открытые данные
Security errata for the ALT family of Russian Linux distributions (Sisyphus plus the p9/p10/p11 stable branches), combined with БДУ ФСТЭК's mapping of ALT as an affected platform.
https://errata.altlinux.org →AST
AST
Astra Linux Security Bulletins
Astra publishes per-release bulletins that map upstream CVEs to their own package repositories, with remediation timelines tied to the certification level (SE 1.7, CE 2.12, etc.). Indispensable for systems that require ФСТЭК/ФСБ clearance.
Region
RU
Updates
24 ч
License
Открытые данные
Vendor security bulletins for Astra Linux Special Edition and Common Edition — the primary certified Linux OS for Russian defense and critical infrastructure.
https://wiki.astralinux.ru/pages/viewpage.action?pageId=27362056 →DEB
DEB
Debian Security Advisories (DSA)
DSAs are published by the Debian Security Team for issues affecting the stable distribution. The downstream tracker (security-tracker.debian.org) additionally maps every CVE to its package-level status across all supported suites.
Region
Intl.
Updates
1 ч
License
Public Domain
Advisories covering the Debian stable and oldstable releases. Ship notes include the exact .deb version that remediates each issue.
https://www.debian.org/security/ →CVE
CVE
National Vulnerability Database
NVD is the U.S. government repository of standards-based vulnerability management data, built on top of the MITRE CVE list. Every record includes CPE applicability statements, CVSS v2 and v3.x base scores, CWE mappings and cross-references to advisories.
Region
US
Updates
15 min
License
Public Domain
Comprehensive catalog of publicly disclosed vulnerabilities with CPE matches, CVSS scoring and reference URLs. De-facto standard for cross-vendor correlation.
https://nvd.nist.gov →UBU
UBU
Ubuntu Security Notices (USN)
USNs are authoritative for Ubuntu systems. The CVE Tracker links each vulnerability to its per-release status (needed, released, not-affected) and to the exact Launchpad bug where the fix is integrated.
Region
Intl.
Updates
1 ч
License
CC BY-SA 3.0
Security notices for Ubuntu LTS and interim releases, covering main, universe and (via Pro) ESM-extended packages.
https://ubuntu.com/security/notices →ALT errata
Related vulnerabilities
External references
https://git.kernel.org/stable/c/3d004f7341d4898889801ebb2ef61ffca610dd6f@https://git.kernel.org/stable/c/47a85604a761005d255ae38115ee630cc6931756@https://git.kernel.org/stable/c/491adc6a0f9903c32b05f284df1148de39e8e644@https://git.kernel.org/stable/c/4b9944493c6d92d7b29cfd83aaf3deb842b8da79@https://git.kernel.org/stable/c/5a81095d3e1b521ac7cfe3b14d5f149bace3d6e0@https://git.kernel.org/stable/c/b94182b3d7228aec18d069cba56d5982e9bfe1b1https://www.cve.org/CVERecord?id=CVE-2025-71083@https://git.kernel.org/linus/491adc6a0f9903c32b05f284df1148de39e8e644 (6.19-rc1)@https://git.kernel.org/stable/c/3d004f7341d4898889801ebb2ef61ffca610dd6f@https://git.kernel.org/stable/c/491adc6a0f9903c32b05f284df1148de39e8e644@https://git.kernel.org/stable/c/4b9944493c6d92d7b29cfd83aaf3deb842b8da79@https://git.kernel.org/stable/c/5a81095d3e1b521ac7cfe3b14d5f149bace3d6e0@https://git.kernel.org/stable/c/b94182b3d7228aec18d069cba56d5982e9bfe1b1